Azure Monitor Agent Heartbeat
Example only
Review and validate before production use. All values below are placeholders.
Problem¶
A virtual machine stopped sending heartbeat records to Log Analytics.
Environment¶
- VM:
vm-monitoring-01 - Region:
westeurope - Workspace:
law-cloudnotes-ops
Quick checks¶
- Confirm AMA extension state in Azure portal.
- Confirm Data Collection Rule association.
- Verify network path to Azure Monitor endpoints.
KQL validation query¶
Heartbeat
| where TimeGenerated > ago(1h)
| where Computer == "vm-monitoring-01"
| summarize LastHeartbeat = max(TimeGenerated)
Common cause¶
The VM was associated with an outdated Data Collection Rule after a policy update.
Solution¶
- Reassociate the correct Data Collection Rule.
- Restart Azure Monitor Agent service.
- Wait 5 to 10 minutes and rerun the query.
Verification¶
Heartbeat records resumed and alert noise stopped.